Limit Sorbet runtime defaults

- Keep runtime typechecking on for `brew test`, `brew tests` and
  `brew test-bot`.
- Stop enabling it for all developer command runs to avoid the wider
  performance cost outside the paths that need coverage.
- Keep recursive typechecking tied to `brew tests`; the CI workflow
  setting will be handled separately.